Remove HttpCookie dependency within User controller, closes #62